FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

php5 -- Multiple security issues

Affected packages
		php5	<	5.2.11

Details

VuXML ID	437a68cf-b752-11de-b6eb-00e0815b8da8
Discovery	2009-09-17
Entry	2009-10-12

Vendor reports

Security Enhancements and Fixes in PHP 5.2.11: Fixed certificate validation inside php_openssl_apply_verification_policy. Fixed sanity check for the color index in imagecolortransparent. Added missing sanity checks around exif processing. Fixed bug 44683 popen crashes when an invalid mode is passed.

[source]

References

CVE Name	CVE-2009-3291
CVE Name	CVE-2009-3292
CVE Name	CVE-2009-3293
URL	http://www.php.net/releases/5_2_11.php